WordPress Google Language Translator Plugin <= 6.0.19 is vulnerable to Broken Access Control

Software Google Language Translator Type Plugin Vulnerable versions = 6.0.19 Fixed in 6.0.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50375 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID e04370b04a40 Credits Abdi Prana...

WordPress Google Language Translator Plugin < 6.0.12 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Translate WordPress-Google Language Translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...

CVE-2021-24594

The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24594

CVE-2021-24594 affects the Translate WordPress – Google Language Translator plugin for WordPress up to version 6.0.12. The root cause is insufficient sanitization/escaping of certain plugin settings before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_h...

Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Put the following payload in the Floating Widget Settings Custom text fo...

Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Floating Widget Settings Custom tex...

Google Language Translator < 6.0.10 - Authenticated Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Cross-Site Scripting XSS only affecting older web browsers such as Internet Explorer = 9...

Google Language Translator < 6.0.10 - Authenticated (author+) Cross-Site Scripting (XSS)

The plugin was vulnerable to Authenticated Cross-Site Scripting XSS allowing a user with Author role to execute malicious JavaScript via the glt shortcode...

WordPress google-language-translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-language-translator is a language translation plugin used in it. A cross-site scripting vulnerability exists in WordPress...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

Cross site scripting

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

CVE-2016-10870

CVE-2016-10870 affects the WordPress google-language-translator plugin, with XSS in versions prior to 5.0.06. Root cause: insufficient validation of client-side data in the plugin. Impact: cross-site scripting via the plugin’s interfaces. Mitigation: upgrade to version 5.0.06 or later (as indicat...

CVE-2016-10870

The google-language-translator plugin before 5.0.06 for WordPress has XSS...

Google Language Translator <= 5.0.05 - XSS

The Translate WordPress – Google Language Translator WordPress plugin was affected by a XSS security vulnerability...

Q Multi Language Translator - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Q Multi Language Translator published at the 'play' market has multiple vulnerabilities...

WordPress Google Language Translator Plugin <= 4.0.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "googlelanguagetranslatorflagsorder". Solution Upgrade this plugin...

Google Language Translator <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)

The Translate WordPress – Google Language Translator WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...